Abstract: The invention is a method for authentication and verification of the identity of a user. The method comprises adding at least one hidden keystroke to the user's textual credentials. A hidden keystroke is an action by a user that does not generate a textual character in a textbox in which a credential is typed but does generate time stamps and a key code. The user may be required to add the hidden keystroke/s at specific location/s in his/her textual credential field. The method of the invention can be used to authenticate and verify users wanting to access addresses, websites, devices, documents, and web pages on a communication network, or a specific application installed on the user's device or to access devices requiring confirmation of the user in order to be activated.